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DETAILED ACTION 

1 . ' This office action is in response to Applicant's amendment filed on 12.27/2005. 
Claims 1, 5 and 9 have been amended. Claims 1-12 are pending. 



Response to Arguments 

2. Applicant's arguments with respect to independent claims have been considered 
but are moot in view of the new ground(s) of rejection. 



Double Patenting 

3. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Long!, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 197^0); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1, 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

Claims 1, 5 and 9 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1-4 and 8 of 
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copending Application No. 10/749,584 and claims 1, 2, 6 and 7 of copending Application 
No. 10/994,620 in view of Thompson et al. (U.S. Patent No. 6,725,382). 

This is a provisional obviousness-type double patenting rejection. 

In respect to claims 1 , 5 and 9 of the Instant Application, Applicant recites a 
method, a computer program product and a computer system claims to provide 
protected storage accessible by BIOS code; storing a symmetrical encryption key in the 
protected storage; encrypting unaccessible data with the key; storing said encrypted 
and unencrypted data in EEPROM with write protect algorithms. 

Claims 1-4 and 8 of copending Application 10/749,584 claims a modified wake- 
on-LAN packet using the BIOS over a network (remotely altering data through BIOS); 
storing the executable code in memory and retrieving the executable code from the 
memory by an action of BIOS; processing the executable code using the BIOS; verifying 
the modified wake-on-LAN packet using the BIOS; storing the retrieved executable code 
to a PARTIES partition of a hard drive associated with the client (storing client 
associated information in erasable memory). The copending Application fails to recite 
encrypting the data and storing the encrypted data and the unencrypted data in an 
EEPROM. However, Thompson teaches a BIOS devices stores BIOS, encrypted 
password, storing the encryption key and security program in the BIOS device, the 
BIOS device can be an electrically erasable EEPROM (Fig. 3 col. 3, line 27-col. 4, line 
1 5). Therefore, it would have been obvious to incorporate the teaching of Thompson's 
encrypting secure data such as password with encryption key stored in the BIOS 
accessible storage such as EEPROM (write protected algorithm is inherently required in 
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order to erase data in the EEPROM) instead of hard drive to ensure secure protection to 
secret data with removable memory storage. 

Claims 1 and 2 of the copending Application 10/994,620 recites securely logon to 
a program using a password; encoding the first password and storing the encoded first 
password in a Trusted Platform Module; decrypting the encrypted program password; 
logging to the program with the program password; storing the encrypted program 
password in a non-volatile memory. In the copending Application, the claim recites 
storing the encoded password in the Trusted Platform Module (Fig. 1 A, Trusted 
Platform Module interface (encompasses encryption module and decryption module) 
interfaces with logon module). The copending Application does not recite the protected 
storage store the encryption key and accessible only by the BIOS and the encrypted 
password and the unencrypted data stored in EEPROM. However, Thompson 
discloses encryption is stored in the BIOS device and is accessible by the BIOS and the 
BIOS device can be an electrically erasable EEPROM (Fig. 3, col. 3, line 27-col. 4, line 
15). Therefore, it would have been obvious to incorporate the teaching of Thompson's 
storing encryption key in the BIOS device with erasable EEPROM instead of hard drive 
to ensure secure protection to secret data with removable memory storage. 

Claims 2-4, 6-8 and 10-12 are also rejected because by their dependency, they 
contain the language of the independent claims. 



Claim Rejections - 35 USC § 102 
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4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

Claims 1-3, 5-7 and .9-11 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Thompson etal. (U.S. Patent No. 6,725,382, hereinafter Thompson). 

In respect to claim 1, Thompson discloses a method for securing alterable data in 
a remotely managed system comprising the steps of: 

Providing protected storage accessible only by Basic Input Output System 
(BIOS) code (see Fig. 3, col. 3, lines 10-26 and lines 47-57); 

Storing a symmetrical encryption key in said protected storage (see col. 3, lines 
47-57); 

Encrypting normally unaccessible (NA) data with said symmetrical encryption key 
(see Fig. 3, item 306 col. 3, lines 47-57); and 

Storing said encrypted NA data and accessible non-encrypted (ANE) data in an 
unprotected electronically erasable programmable read only memory (EEPROM) with 
existing write protected algorithms (see col. 3, line 27-col. 4, line 5, EEPROM, write 
protected algorithms is inherently required in order for the data stored in the EEPROM 
to be erased). 
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In respect to claim 2, Thompson discloses the method of claim 1 further 
comprising the steps of: 

Altering said ANE data by issuing an existing write request to said BIOS from 
said write protected algorithms for said EEPROMS; and updating said ANE data in said 
EEPROM (see col. 3, lines 27-46 and col. 7, lines 26-44). 

In respect to claim 3, Thompson discloses the method of claim 1 , further 
comprising the steps of: 

Accessing said NA data via a change request issued to said BIOS over a secure 
communication link; Validating said changed request (see Fig. 1, item 130, col. 5, line 
45-col. 6, line 67); 

Retrieving said symmetrical encryption key by said BIOS in response to said 
validating change request; Using said symmetrical encryption key to decrypt and alter 
said NA data; encrypting said altered NA data using said symmetrical encryption key; 
and storing said altered encrypted NA data in said EEPROM (see col. 3, lines 27-46 
and col. 7, lines 25^44). 

In respect to claims 5-7 and 9-1 1 , the claimed limitations are computer program 
product and computer system claims that are substantially similar to method claims 1-3. 
Therefore, claims 5-7 and 9-1 1 are rejected based on the similar rationale. 



Claim Rejections - 35 USC § 103 
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5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner In which the invention was made. 

Claims 4, 8 and 12 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Thompson (U.S. Patent No. 6,725,382) in view of Mirov et al. (U.S. Patent No. 
6,138,236, hereinafter Mirov). 

In respect to claim 4, Thompson discloses the method of claim 1 . Thompson 
does not disclose but Mirov discloses the steps of: 

Hashing said ANE data and encrypting said hash with said symmetrical 
encryption key; Storing said encypted hash with said ANE data; Computing a hash of 
configuration data in said ANE data on boot-up request; Decrypting said stored 
encrypted hash of said configuration data; Comparing said decrypted hash of said 
stored configuration data to said computed hash of said configuration data from said 
ANE data; Booting normally in response to a compare of said decrypted hash and said 
computed hash and Issuing tamper notification and initiating recovery processes on a 
non-compare of said decrypted hash and said computed hash (see Mirov, col. 2, lines 
•21-32 and col. 3, line 55-col. 5, line 50). It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to incorporate the teaching of 
Thompson's password based security program with Mirov's teaching of implementing 
hashing system to authenticate plurality of micro-code to authorize execution of micro- 
code to ensure the integrity of the stored data. 
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In respect to claims 8 and 12, the claimed limitations are computer program 
product and computer system claims that are substantially similar to method claim 4. 
Therefore, claims 8 and 12 are rejected based on the similar rationale. 



6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tongoc Iran whose telephone number is (571) 272- 
3843. The examiner can normally be reached on 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jacques Louis-Jacques can be reached on (571) 272-3962. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Conclusion 
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